FAQ: File Locations for Key LogScale Data

  • Dashboards are stored in the global-data-snapshot.json file within the base data director configured for your deployment. They are stored within the file as JSON objects, you can look for them by taking the ID at the end of the dashboard URL and look for it in the global file. The JSON object contains all the details to build the dashboards (the widgets and their size and position, the queries to be run for each widget).

  • Alerts are also stored in the global-data-snapshot.json file. You can look for them in the same way you do for dashboards, by using their ID. Every alert is related to a "notifier" ID, it identifies the action. The action is described as another JSON object and it includes for instance the query that you're using for the alert, the webhook to be used...

  • Files are stored on disk used for your LogScale installation under the LogScale data directory.

    Files are stored in directories and sub-directories with the following structure:

    graph TD humio["LogScale Data Directory"] --> dataspace1["Dataspace Directory"] humio --> dataspace1["Dataspace Directory"] humio --> dataspace2["Dataspace Directory"] humio --> dataspace3["Dataspace Directory"] dataspace1 --> datasource1["Datasource Directory"] dataspace1 --> datasource2["Datasource Directory"] datasource2 --> files["Files"]

    You can double-check the whole hierarchy by running the following query in the GraphiQL UI using the query:

    graphql
    query {
  repositories {
    name
    id
    datasources {
      name
    }
  }
}

    The following output is from a fresh installation of LogScale:

    graphql
    {
   "data" : {
      "repositories" : [
         {
            "datasources" : [
               {
                  "name" : "v2pmxcQzlkeX0QsPMnyHuHU8"
               }
            ],
            "id" : "t238gTzyxf5LQuFw839YkDhI",
            "name" : "humio-metrics"
         },
         {
            "datasources" : [
               {
                  "name" : "CQqJZSmjwjSyTnnRqWQmw8ip"
               },
               {
                  "name" : "mXADO52f2Jyavu5h8Y4hp4cv"
               }
            ],
            "id" : "TvIGCQx3EdPMLmfuxFrkVDcb",
            "name" : "humio-audit"
         },
         {
            "datasources" : [],
            "id" : "NIEQ9hQUVcSeocbDBAMbFsrz",
            "name" : "humio-measurements"
         },
         {
            "datasources" : [
               {
                  "name" : "34VNGTT3RpekYRbs9UStnSzG"
               },
               {
                  "name" : "di5ZK1p6t04zy8mVWSnk6g6p"
               },
               {
                  "name" : "OExMfDv3S3dCTHPA0uh7LxJn"
               },
               {
                  "name" : "Nfeqb0ZVzwgdQ6tmvSM0KQeA"
               },
               {
                  "name" : "2I1cPE3BaKo64kJzpoYFNXnu"
               }
            ],
            "id" : "fmmTRc6VXlwofpJiQMOAANNU",
            "name" : "humio"
         },
         {
            "datasources" : [
               {
                  "name" : "kLczJnMBubRYdbXJUxaykvaZ"
               },
               {
                  "name" : "pf4kc8ekpfH6Pn0wKhFbTN7a"
               }
            ],
            "id" : "e5KTBpGi52D39RGGThxJEAWV",
            "name" : "humio-usage"
         },
         {
            "datasources" : [],
            "id" : "sandbox_LUl2uHuS9uyr66u8hRBDVvkA",
            "name" : "sandbox_LUl2uHuS9uyr66u8hRBDVvkA"
         }
      ]
   }
}